From: Martijn van Oosterhout <kleptog@svana.org>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Florian Pflug <fgp@phlo.org>
Cc: Magnus Hagander <magnus@hagander.net>
Cc: Euler Taveira <euler@timbira.com>
Cc: Bruce Momjian <bruce@momjian.us>
Cc: Pgsql Hackers <pgsql-hackers@postgresql.org>
Subject: Re: libpq compression
Date: Mon, 18 Jun 2012 19:42:34 +0200
Message-ID: <20120618174233.GA24681@svana.org> (raw)
In-Reply-To: <27043.1339950593@sss.pgh.pa.us>
References: <CABUevEzVpqS5RCLz2fFREdPFkuYkEKsrMpnfPixYWPki2=iJOA@mail.gmail.com>
<4FDB954F.9010606@timbira.com>
<5136.1339799120@sss.pgh.pa.us>
<5365.1339799869@sss.pgh.pa.us>
<CABUevEz_V4YYc0tUhkC6KD2GddysM5Z76pcHcMYiMDd7dwMxVQ@mail.gmail.com>
<11357.1339822502@sss.pgh.pa.us>
<CABUevEy1sUTOeCjNicUggnMpT7MfgjWud8kQ=wkvJsfbCU8=WQ@mail.gmail.com>
<19804.1339859730@sss.pgh.pa.us>
<9B10BD6E-31AA-4699-BB67-5C386B623F77@phlo.org>
<27043.1339950593@sss.pgh.pa.us>
On Sun, Jun 17, 2012 at 12:29:53PM -0400, Tom Lane wrote:
> The fly in the ointment with any of these ideas is that the "configure
> list" is not a list of exact cipher names, as per Magnus' comment that
> the current default includes tests like "!aNULL". I am not sure that
> we know how to evaluate such conditions if we are applying an
> after-the-fact check on the selected cipher. Does OpenSSL expose any
> API for evaluating whether a selected cipher meets such a test?
I'm not sure whether there's an API for it, but you can certainly check
manually with "openssl ciphers -v", for example:
$ openssl ciphers -v 'ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP'
NULL-SHA SSLv3 Kx=RSA Au=RSA Enc=None Mac=SHA1
NULL-MD5 SSLv3 Kx=RSA Au=RSA Enc=None Mac=MD5
...etc...
So unless the openssl includes the code twice there must be a way to
extract the list from the library.
Have a nice ay,
--
Martijn van Oosterhout <kleptog@svana.org> http://svana.org/kleptog/> He who writes carelessly confesses thereby at the very outset that he does
> not attach much importance to his own thoughts.
-- Arthur Schopenhauer
Attachments:
signature.asc (application/pgp-signature, 827B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: kleptog@svana.org, tgl@sss.pgh.pa.us, fgp@phlo.org, magnus@hagander.net, euler@timbira.com, bruce@momjian.us
Subject: Re: libpq compression
In-Reply-To: <20120618174233.GA24681@svana.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox